I have a custom wrapper for 1PW that lets an agent browse and request credentials, then I can provide it a lease to access those for a certain amount of time. Super nice and I hope they build that in to 1PW itself.

Just an idea, is it possible to automatically rotate secrets immediately after they're used or are these things like passwords to online platforms that need to go through a reset flow.

Cant you do exactly this with the CLI?

No, not as far as I can figure. Sure, Claude can access secrets with the CLI but it's not very granular usually it's just asking for access to all secrets

Ah, that's fair. I setup a dedicated vault for my Claude Code and only gave it access to the secrets I'd probably otherwise have in a `.env`.